» www.towerworldtown.com
Overview
Analysis
IPs Addresses (16)
Downloads (30)
Network (23)

www.towerworldtown.com

Communigal Communication Ltd

Domain Information

The domain www.towerworldtown.com registered by Communigal Communication Ltd was initially registered in January of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.

Registrant:

Communigal Communication Ltd

Registrar:

GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:

Oregon, United States (US)

Create date:

Sunday, January 10, 2016

Expires date:

Tuesday, January 10, 2017

Updated date:

Sunday, January 10, 2016

ASN:

AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:

towerworldtown.com

Whois:

1 towerworldtown.com record

Scanner detections:

Detections (97% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.InstallCore.Installer.Installer (M), PUP.InstallCore.Bundler (M), PUP.InstallCore.SoftWeb.Installer.Meta (M), PUP.InstallCore.FC.Installer (M)

96.67%

Microsoft Security Essentials

Worm:Win32/NeksMiner.A

3.33%

F-Secure

Application:W32/Generic.70053c248f!Online

3.33%

ESET NOD32

Win32/InstallCore.ACY.gen potentially unwanted application

3.33%

The domain www.towerworldtown.com has been seen to resolve to the following 16 IP addresses.

54.149.195.20

ec2-54-149-195-20.us-west-2.compute.amazonaws.com

June 25, 2016

52.38.209.219

ec2-52-38-209-219.us-west-2.compute.amazonaws.com

June 25, 2016

52.33.46.229

ec2-52-33-46-229.us-west-2.compute.amazonaws.com

June 25, 2016

52.32.12.104

ec2-52-32-12-104.us-west-2.compute.amazonaws.com

June 25, 2016

54.191.246.249

ec2-54-191-246-249.us-west-2.compute.amazonaws.com

June 25, 2016

52.25.41.73

ec2-52-25-41-73.us-west-2.compute.amazonaws.com

May 15, 2016

52.24.26.116

ec2-52-24-26-116.us-west-2.compute.amazonaws.com

May 15, 2016

52.26.95.11

ec2-52-26-95-11.us-west-2.compute.amazonaws.com

April 17, 2016

54.148.57.212

ec2-54-148-57-212.us-west-2.compute.amazonaws.com

April 17, 2016

54.69.198.37

ec2-54-69-198-37.us-west-2.compute.amazonaws.com

April 17, 2016

54.69.11.66

ec2-54-69-11-66.us-west-2.compute.amazonaws.com

January 29, 2016

52.88.159.85

ec2-52-88-159-85.us-west-2.compute.amazonaws.com

January 29, 2016

52.35.10.15

ec2-52-35-10-15.us-west-2.compute.amazonaws.com

January 29, 2016

52.34.170.106

ec2-52-34-170-106.us-west-2.compute.amazonaws.com

January 29, 2016

52.25.23.136

ec2-52-25-23-136.us-west-2.compute.amazonaws.com

January 29, 2016

54.191.37.5

ec2-54-191-37-5.us-west-2.compute.amazonaws.com

January 29, 2016

File downloads found at URLs served by www.towerworldtown.com.

1 / 68 (PUP)

http://www.towerworldtown.com/c?x=9zNjM4Bw WIw0ic27XlvhWw9UyHF9bixCK/qDH1jw1A=&c=kHvp7O2RbdMdZCGHN0CF4ls8d3dp3WkAazgIxy5Sg JIIQp0h3BiwlwGb6V1IiX7n42AMj3UqmkdWfQcvpT/4M9GDvqvQTMxcAJUSR09pTZlgU6klZYjTCmPVmKr/6v &fallback_url=http://download.geogebra.org/installers/.../GeoGebra-Windows-Installer-5-0-192-0.exe&downloadAs=GeoGebra-24054-dp.exe (6434012c0761d91d0536195683f97029)

1 / 68 (PUP)

http://www.towerworldtown.com/c?x=AlGJNV1qzg8irLTKkgSuxXxJJTiddvdPV5Fv89eNR2U=&c=nQPWlT/jihH4KhmWgnTjoj33UvFwbKOM4s5vZoGh/kBGmgVuP 4ASaaQeWAL tErdQZKwPnJOM9dLGhqRlxFS6kjVEi055mgvmH6MHx3xsDeud8r5156ERy3XbSuciFA&fallback_url=http://xp.yimg.com/gj/msgr/115/.../msgr11us.exe&downloadAs=Yahoo-Messenger-12811-dp.exe (61dfe0a9f4576cfe37838eee47864021)

1 / 68 (PUP)

http://www.towerworldtown.com/c?x=3PjTtR35x1fiT5IqmQT PwF1jAP/Uot80hP2YFs6xY0=&c=aN15OQ6vZo3u2ngXYpFH40XTBC0WR /R4KofBdrj8ya64BnJ99zQ4iv7aMQ xcKoule6Ykvm6bg NeedEUI1qdNgd2SDtVlG9cRJlM7x7gYGXnnAsDN/bIGG jiZDu/k&fallback_url=http://storage.dobreprogramy.pl/.../DTLiteInstaller.exe&downloadAs=DAEMON-Tools-Lite-12708-dp.exe (1380991dbbee13ed4cc48b68c834e4ea)

1 / 68 (Adware)

http://www.towerworldtown.com/c?x=TvvoajYQoelCgqyb2juuLtRqh9JLgSteEr v80/46yU=&c=5GzWktPZlDgC5rOBtDFwEHAWrumT/UqEQKnaVah8QsZHKIMGElyXG9xSXM16VRHgGf07/pTNTJZJtOmNYJ3rqVHE5eryOhvKt4SbssIq4ZQGjF5iscX8gNXIh zhil6n&fallback_url=http://static.infomaniak.ch/photofiltre/.../StudioPL.zip&downloadAs=PhotoFiltre-11571-dp.exe (c714a6dcf71f0784f131a4d4e8f9f949)

1 / 68 (PUP)

http://www.towerworldtown.com/c?x=Ik/xPkaHemQMIl0gC8WOnG6GTqvj4OF/bnx4dBsxwKw=&c=kwBwjZeqC0j99x8zlSyYI8wXP7rpU4DIbCijjkFS LGSpwCNXpRixJ7usrzBbdoOb/yZ6oFPZISEsHoOTr0w2LYotQUlBQDvMpI16svt61UuoNjb/E4k4n81irDv5ctV&fallback_url=http://www.yaodownload.net/.../pdf2wordsetup.exe&downloadAs=Free-PDF-to-Word-Doc-Converter-54709-dp.exe (56f65c6ca02d2b93655693f5296130d9)

1 / 68 (Adware)

http://www.towerworldtown.com/c?x=PyUmZyXfI3BJilMDz69ecD54PCkiOoMrMpvNffJGlfM=&c=Cf6uYUeaq1baHw8K xrJ4UPlPXCSbiWTqSECPUN hTBnEXAXXOS5eqDtao6adIzWlTnINdrQTHDzQ1O5u4KK1c1oK1DP0nwi0VUeCLceDYejO/yXLng4Qw6Ttk6uwjk8&fallback_url=http://cdn.kmplayer.com/KMP/Download/release/chrome/.../KMPlayer_4.0.3.1.exe&downloadAs=KMPlayer-12538-dp.exe (5561eb8103d7bc539b0b221b7ac4920a)

1 / 68 (Adware)

http://www.towerworldtown.com/c?x=/Tm64bAUXleg7EuUZTsL/mqLTFmc R w9OfrOMQfg60=&c=kzyK3P2 t/EzRWMLIskidrTmvp02jEM3U/eTdFKQ3q0OmVRnAh7D5DWpaJafIFQ751NwRKjVwKQcbE 0 Yda6kAyTUA/CVSFQxxRiND26jCbRLS3R6UBmYNOtgdyI5qq&fallback_url=http://storage.dobreprogramy.pl/.../DTLiteInstaller.exe&downloadAs=DAEMON-Tools-Lite-12708-dp.exe (bc46800a37a59f442be843f5a680881b)

1 / 68 (Adware)

http://www.towerworldtown.com/c?x=/Sy8nsGq6h7OD7D98MI2MDgLshMNIczYyTkaM89JrzE=&c=GwGM0UEypLF2A6ChMUOPxd3mhRJ41P/a5T5pBk1mdkbPueIam5/NuB8SezAHCaaunOXNOwjJctnuVd/G M9pL/6jvJUPrlPI3e0ypt8JM2LicqtNdzmAfkCQU32dByAi&fallback_url=http://storage.dobreprogramy.pl/.../DTUltraInstaller1.0.exe&downloadAs=DAEMON-Tools-Ultra-51497-dp.exe (b0a4710029412d9e8374e6f2899b5d0f)

1 / 68 (Adware)

http://www.towerworldtown.com/c?x=oqwVUeZUsYMFB82wKgEoDKeLiP74qMXh1fN 49PJeP4=&c=7vhI46ds/peoQpFV9NXEeZqCL78k2KGqhcclfLL74CdF79Z4twXDp3jEBeZzzEQQcHqM9UR0mZ/p9WkEaIzA4ejLgLpE b5vOlPiOz1ex4IbajnnCEOFhrI0l9rvrDNB&fallback_url=http://elisoft.pl/.../FakturyMagazynFull.exe&downloadAs=ELISOFT-Faktury-i-Magazyn-51611-dp.exe (39776d43c66607181c4cf87c8921ef9d)

1 / 68 (Adware)

http://www.towerworldtown.com/c?x=TkiIEFnPmxFZz5VrZJU npzA3vr5BIF2iRxgEJN5Xtk=&c=0k2l5cgDC3PlzM2UCkugpSTolFK4sRPXKlbqaEwyHw1C6aqU7u8 rPZVfHZspTnHmlhcZONM2oW271Jq1PLf4RcGF8qqWeZIVJnxERoB4LevfF9SftYIcY2Y6hLMskuM&fallback_url=http://programer.internetdsl.pl/.../faktura_s.exe&downloadAs=Faktura-13080-dp.exe (7e1cf482fdfcb10445804298ca4b423c)

1 / 68 (Adware)

http://www.towerworldtown.com/c?x=45aLl8BDvA/chrDvyNwYLkXE7JQ2L6StDyApiXbEioE=&c=kHHvVZJ03JxoNDEDk8YmUengwSIIU/ovhttMTem3D8xzQ5hiw7dMnLtis 0uISXb7A/V1dmG9EmeR/h6DAUG05skkNxwwWPqZawLzeozV9TVwPR2OC4ZFGdY Hul6j4Q&fallback_url=http://get.geo.opera.com/pub/opera/desktop/34.0.2036.25/.../Opera_34.0.2036.25_Setup.exe&downloadAs=Opera-12614-dp.exe (84f52f8c2b98a0423810df585f5374fb)

1 / 68 (Adware)

http://www.towerworldtown.com/c?x=x5Lif0heFBA9ggk3slxyFIUvoZ 8NLLlESy5mzfHJcc=&c=VMM3PQ9Wy hzpUN8V9TK9ESJDjCwBqs9OvjAqM8GHeW joRIikTjju/0CGok6UGu239XxAtFMKSUQW/zs8iiqFrowN6Tck/srUTqJD7Hq2pVPIahNjyXCRPXnuWHTp5o&fallback_url=http://download.microsoft.com/download/9/E/4/.../PowerPointViewer.exe&downloadAs=PowerPoint-Viewer-12204-dp.exe (f8b4d79dcf053145c7f7744c1929771d)

1 / 68 (PUP)

http://www.towerworldtown.com/c?x=co9Oz6R6LIw0fq02FB/jjI6OCIU1h1eIqPw38Q7/d6M=&c=4zUQZy7CiQ5nWRy/z00pg2jPy2QKaDpIaU39VxloHF Q9TdGgP/Ie0Cez82HxDcevF oqyU2 1s0KkBp7tnEYz0Fm1BjhIC4/m6KMq7IHfZ/CnVUDNQb4lEsKsm2RXv6&fallback_url=http://.../ccsetup513.exe&downloadAs=CCleaner-13061-dp.exe (dbbfdf3c93395022c25df6a7c7606228)

1 / 68 (Adware)

http://www.towerworldtown.com/c?x=Jya2OhU9k8w4yit4OuQhiRuKa4huNcbaV3aRmQRe5X8=&c=y7i4QGmbfB/H/oFatGzSxy8OW4MemWhA7Z9SrAingVtYwiWKRKNks zWT5bgMo7XuUVS6EXUylJaA xb87OnwkkXJHSl Po0I026tqo0Texxt7y5hHkMFtZDBd0z6TTZ&fallback_url=http://ardownload.adobe.com/pub/adobe/reader/win/9.x/9.5.0/.../AdbeRdr950_pl_PL.exe&downloadAs=Adobe-Reader-12627-dp.exe (40046083fc381c330958b142a01dd239)

1 / 68 (Adware)

http://www.towerworldtown.com/c?x=V1x/tUD28yYU31KJiMtUqt0DtxJyEKS3JgrLAY/5j7s=&c=2f1FPbFVdmm/P7EUhElCyX7wvtd e05ihpw1q r1OxqLDYBaNdO9/9ZKKQTePym6EH7u31y9f6QLm2C4uNzXLV4OWfJ4NoNV0u4AlYJKpnATYRyyaWOFgNpYlK7783g7&fallback_url=https://eaassets-a.akamaihd.net/Origin-Client-Download/origin/.../OriginThinSetup.exe&downloadAs=Origin-38298-dp.exe (997f555be79e24167a1a53f322da03da)

2 / 68 (false positives)

http://www.towerworldtown.com/c?x=JPqJA5uZrGMX1T4aLIDANGqgRsOiubeQu9mgLHzM9CI=&c=oa4/OWQfc5bKrt9Mkzw3/0z2Ao00rreqGX/EsBgVm4D72SLn3H4bWNuWrXpaJI5eZMbUlL7OY10rG5gyULQzBh3nLx2FwiCbJxet 7QMiqsWEdFMnTW2GcEGPei9l4av&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/43.0.4/win64/.../Firefox Setup 43.0.4.exe&downloadAs=Firefox-13108-dp.exe (wrar420.exe)

1 / 68 (Adware)

http://www.towerworldtown.com/c?x=yJOCTuFPeg9ayjSYPuSiyZXUsZJHYfxfwNV/y64FXpw=&c=yxkbSSXZc8w5wheCZAUP3uhx/sA62dJsUWCYxY0yVyi/NsTDiqC3dH6lzzsCJRgja8j75IbTB/jAK9KuCriLhDfJ9V8z3U8RhelfhHUbre /Yqp3/OJscHSIYJsIZL5a&fallback_url=http://static.infomaniak.ch/photofiltre/utils/.../pf7-setup-en-7.2.1.exe&downloadAs=PhotoFiltre-12422-dp.exe (b9d3640452b599e9dabc6fd52b4a0e72)

1 / 68 (Adware)

http://www.towerworldtown.com/c?x=0faTycuWJeM/LrQIxiLQTx350F5ExaIkWORZCReY27Q=&c=5uaBNXnh5zdnGMC CIF QGU6WESlpFNStNWCJ7TWRRdr5i iXUGyqunwfiHRPceeJfwftvzKHQ0EUNrGahSSKC6wgJZVMdUReBVZ9CEg/FHrNGMpr9qUCmFv3dmLAl5/&fallback_url=http://download.copernic.com/.../copernicdesktopsearch.exe&downloadAs=Copernic-Desktop-Search-13153-dp.exe (9f044439053a5847979dd0ba4deea791)

1 / 68 (Adware)

http://www.towerworldtown.com/c?x=PqshMEKi33VAyy9rgPHY8GvgvZWsnEt R8mcdV66ZoA=&c=ijwxBk/yXREBnN3EK5ngqISEo/2aHBD9zo7 yfdlwqHmwMw/ 4d7voPnzdgpOatk6/q0oijKXhSDKdEElx/Xb83lpm0xB 6ckwR7R5msV5AK 3IX 1tXNbnQ826 885E&fallback_url=http://ardownload.adobe.com/pub/adobe/reader/win/9.x/9.5.0/.../AdbeRdr950_pl_PL.exe&downloadAs=Adobe-Reader-12627-dp.exe (b46a403051376e3425efb89153f6fc21)

1 / 68 (Adware)

http://www.towerworldtown.com/c?x=LDWKyOV60XvchPcWaLw4znp24RSH1fWikdkB5QAWqng=&c=iDWQYof1aMxmIFddphhWRutCUx7Wk1wrhjJbonfNptpwy8ChSE tuH1jVki9T8Ehl8WztbEzVqPj8h6pi3E7L/409IcB30XQ/6zNoG/c/n2LObi/Ks26AJtCMDH3tvHD&fallback_url=http://appldnld.apple.com/Safari5/.../SafariSetup.exe&downloadAs=Safari-13196-dp.exe (4ed5cbed033fb8f71b6e65d3bf3509d6)

1 / 68 (Adware)

http://www.towerworldtown.com/c?x=1wEVlNSgmpvO2FL BY67HqMS /UkH9OHPG4xFMegoeM=&c=5aTvVG/Asmp4yMJmBDDe4LuaBbWXoiA1Sc 4pxt eMeFNstsI0bmYJuNI RHnDvzEPpxJBKND0pP cu9s/ LC2zXLojJCNEvIBJG68ytLcG1W0iqt9P02neFdcVEO/5V&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe (2ed1eee145e56197fc0b2b4c8648812a)

1 / 68 (Adware)

http://www.towerworldtown.com/c?x=KY8 iRUOzAtR7P1DkaXYTFecHndxdojYZvX4xXh /HY=&c=4xQNACVqGYMiH/OivaWEoAAwxkYsJS8pzGzHbLGq17x2xVD4PmfxAt EczN/xxDHUbFLEbfN4x5zhzcbUmA5/XYzOatLmxOqnbCWYIzDdqbd/B43OALImFWeriVx5ynk&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/43.0.4/win64/.../Firefox Setup 43.0.4.exe&downloadAs=Firefox-13108-dp.exe (db466147f1960b35476ee80abc9446ae)

1 / 68 (Adware)

http://www.towerworldtown.com/c?x=END9LnnLxRVlv0HaYNz4pzr57WnTRpT4nFWXEftcD6Y=&c=0F53ivl2hlyEH7ri1/AThAvQqhCRiNFBg4cEFWRjitU6Wp3MGY sS3AG/NIp8YmIO3eDe i1lr5Ft2ulwK5pgcByvTvHM5jCNAB0LiC2bEr NyPjcrAQZcFSyQM0bhx2&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe (8d10b46c75a4bce8221817103d48623b)

1 / 68 (Adware)

http://www.towerworldtown.com/c?x=tXDha2c9vhykpGCnxxqbs69aTuPI9k7KknzklYzV8xE=&c=zOUp9qafnm2MNEJbh0jKzKQ7KqtYonPauba7eFK78b0r3TRAiSMg6E8iEmKRCuBHW9oksuoemfFaqeukuLLTvs7x/Do/KOGR5RCfNtTcDiwIHUE0MO7WzUd1C6iu2wlJ&fallback_url=http://storage.dobreprogramy.pl/.../Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe&downloadAs=Apache-OpenOffice-12754-dp.exe (5ae500373152eae67cc1c279d5007bc5)

1 / 68 (Adware)

http://www.towerworldtown.com/c?x=91c/tRH0om8Or2F 0GvECHZcH/BjxeLmq8g3XUwWpC0=&c=fEGwkQ4V3rcVlBafHUGz6bEc0EGNM MAnXfrKBHKkgO 5Lmvg5PWChQN3ZDrAzCXqUMaeLYvC7IWt7gTHEvfjdvU8WJCKEj7AMlEsYCe90oTDd0Itcr51wQ3VmzC7ITF&fallback_url=http://download.skype.com/.../SkypeSetupFull.exe&downloadAs=Skype-13018-dp.exe (d21fe599601750367c2f774e133f6a5b)

2 / 68 (PUP)

http://www.towerworldtown.com/c?x=doHGP0IMlZOgkFRtB8JlMst8gao1LwlF3hPddy0 H1A=&c=g6gS9 HAGM5 UKPdpH1WqzmOV/6/yT6Z8YccxN7awxjZg632aaHCAYdX45b8qln7/FXXjOT50T 9mCSHR9iWcE8DAO/pE/kpB9OZHPRJnQKKjoy4XbjyCLh/njp0Tk9v&fallback_url=http://get.geo.opera.com/pub/opera/desktop/34.0.2036.25/.../Opera_34.0.2036.25_Setup.exe&downloadAs=Opera-12614-dp.exe (c.exe)

1 / 68 (Adware)

http://www.towerworldtown.com/c?x=lJnXHW4pOkaNEQngdBQtQnVvuNhgmtppDG UWSRRmVY=&c=H56tGHr1Ma fq0JkCiATl9lgpiWqc8SxyNmPK1Oa6uf0EE9vIoqHJVNEAb3//aJLyy4w6R7uMySwXNSv/jh7SoL2IAkH0WFEJz xU/5E/z6QbnLfxA4MvvTUhyNRKbxQ&fallback_url=https://secure-appldnld.apple.com/quicktime/.../quicktimeinstaller.exe&downloadAs=QuickTime-12821-dp.exe (82c327e1e3b9b5c67673024ff885a72b)

1 / 68 (Adware)

http://www.towerworldtown.com/c?x=w4EnGIqHARxKZ7ngzZTBZzrGqPA9SP80oguCtDjN81A=&c=Zfoa1V OY CgIoNuCQMQZJhlfSFXvf 0Wh2VqWj9x7tdHz0k1WVrD21TasHzz2ec80pNlffstjzAAEbdfyIeMbIfk0VqY3za6x74 sBHcyPpNhwE0Qg7y22nq /8zFMt&fallback_url=http://autoid.net.pl/.../FR12_Trial_PL.exe&downloadAs=ABBYY-FineReader-Professional-12711-dp.exe (4edb80b0b5bf1b86047cf6ea8b8359fe)

1 / 68 (Adware)

http://www.towerworldtown.com/c?x=mX34J3vjw2DfS2L/LexgkB8Q6Aw WgkBEKI0l5eJtM4=&c=Kmstd2CIpb3sh5uybJb0q18I1x26KXPPcggtgXy9vu6aGiyGthsljpKiNyb37wJYN1/NG27VS9UGkTxi23jsxLbNrYGSGRNMzfxHBh800KfU0mHVt8bXCvwUIRviFoqL&fallback_url=https://cdn1.ashampoo.net/public/xen/.../ashampoo_burning_studio_2016_22039.exe&downloadAs=Ashampoo-Burning-Studio-12487-dp.exe (145298b9935375e9067058efc63e9753)

1 / 68 (Adware)

http://www.towerworldtown.com/c?x=qOpEldo9iCwuFuKGmBy3abiq8l/lrdY6D2yOs5BK/q4=&c=uKlYMrlVNqjTlctEOvfpTuapgmPelXN5p5qT9d9xniX5GCJ3fyaeHxOS2akXCv5oq3XTajAldVlkpB tet7kM6QpIBZLkI8NazFlTiQGYqZj8ZBEgrt3FX7U4UOwFeV&fallback_url=https://mirillis.com/.../action_1_29_0_setup.exe&downloadAs=Action-33680-dp.exe (d6224b753c537be5df50e09b853bc869)

Latest 30 of 30 download URLs

The following 23 files have been seen to comunicate with www.towerworldtown.com in live environments.

TCP » 52.38.209.219:80

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80

browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80

browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.38.209.219:80

browser.exe (Browser)

TCP » 52.33.46.229:80

citrio.exe (Citrio by CatalinaGroup)

TCP » 52.33.46.229:80

Client.exe

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80

ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80

browserair.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80

3.9.0.128_20140916045038.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80

e5be.tmp

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

TCP » 52.38.209.219:80

client.exe

Latest 20 of 59 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.